Texas Veteran Certified BusinessTexas VetHUB Vendor

Texas Veteran Certified BusinessTexas Certified VetHUB VendorFIPS 204 Ready

Post-Quantum Cryptography and Tamper-evident Audit Trails for Public Sector and Defense

FIPS 204 hybrid digital signatures, HashSign AI pre-sign checks, and Hedera ledger consensus proofs for local, state, and federal agencies.

Company data

Identifiers for contracting officers

HashSign is a product of Exemplar Copy LLC, a Texas veteran certified business and Texas Certified VetHUB vendor. CAGE and UEI will replace the pending markers as soon as SAM.gov registration is issued.

Agency demos: ceo@exemplarcopy.com · support@hashsign.app

Business type

Texas Veteran Certified Business / VetHUB

CAGE code

Pending

Unique Entity ID (UEI)

Pending

Deployment posture

Cloud, hybrid, or enclave

Primary NAICS codes

  • 541511Custom Computer Programming Services
  • 541512Computer Systems Design Services
  • 541519Other Computer Related Services
  • 518210Computing Infrastructure, Data Processing, & Hosting

Product service codes (PSC)

  • 7A21IT & Telecom — Security & Compliance Software
  • D310Cyber Security & Encryption Services

Core capabilities

What agencies can procure

FIPS 204 (ML-DSA-65) PQC hybrid signatures

NIST-standardized quantum resistance combined with classical ECDSA P-256 for backward compatibility. A signing request can return both envelopes, and Hedera stores a SHA-384 (96 hex characters) hybrid anchor of the pair so the consensus message stays inside the HCS size limit.

Public ledger chain of custody (Hedera HCS)

Tamper-evident consensus anchoring that records a SHA-384 seal (96 hex characters) at a consensus timestamp. Raw payloads stay off the ledger. Verify returns the transaction id and consensus time anyone can recompute. A hash shows a document has not changed since it was sealed. It does not prove who signed it.

HashSign AI pre-sign checks

Automated contract anomaly detection before a signature is issued, plus agent key scope enforcement and tamper-evident event logging. Agents authenticate with scoped API keys. They never hold signing keys.

Air-gapped and sovereign deployment options

The document stays on the device until the user sends or shares it. Only the SHA-384 seal (96 hex characters) is anchored. Optional cloud review runs only when the user taps it. Deployment can be commercial cloud, a hybrid network, or a government enclave.

Security posture

Compliance alignment

HashSign is built so a contracting office can map the product to published standards without treating a marketing claim as an authorization. FIPS 204 readiness is the ML-DSA-65 hybrid envelope. It is not a claim of a completed CMVP certificate.

Signing keys stay isolated from agent credentials and from operator consoles.

  • NIST FIPS 204

    Module-Lattice-Based Digital Signature Standard (ML-DSA).

  • NIST SP 800-208

    Recommendation for Stateful Hash-Based Signature Schemes, cited for PQC migration planning. HashSign's hybrid envelope implements ML-DSA under FIPS 204, not LMS or XMSS.

  • Texas DIR & HUB

    Texas Certified VetHUB vendor, aligned to state procurement and Historically Underutilized Business programs.

  • Zero-trust architecture

    Key isolation and server-side operator separation. Scoped agent credentials, audit logs on every sign request.

Request a capability briefing

Download the one-page capability statement or write ceo@exemplarcopy.com and support@hashsign.app. Include your agency, the workflow you need signed, and whether the deployment is cloud, hybrid, or enclave.